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How?* 1 ' GOln9 Dark pr ° b,em 9 °“ en worse ,or ,aw enforc ement over the past year? 

The impediments faced by law enforcement have been getting worse for ouite cnmn Hm* 

SerVlCas 1 

ease, law enforcement faces an increasing number of diverse challenges. 

^ n l of tbe ne ^f st communications services are developed and deployed without 
ns,derat,on of law enforcement's lawful intercept needs. Under current law there is no 

ZTf'rlT^ ? r ► man y c ° mpanies t0 d0 so - Communications Assistance to Law Enforcement 
nm J mp c r' f UP<jated in 2 ° 05 ' applies on, V t0 traditional telecommunications ? a ?ri™rs 

broadband' aSselS V0 '“ ° Uer Intemet Pr0t0C0 ' (V ° IP) servicas ' and Providers of' 

include encryption thmth»n th * ann ? uncemen * "on, Apple that their phones will 
nciuae encryption that the company is not able to unlock even in rocnnncA «■« -> 

court order? How will this impact the FBI's InvesHgatlre ablmies? P 

“ diSCPSS 5pedfic com P anies or technical investigative 
pab.lities, the FBI continues to be extremely concerned about the serious threat Dosed hv 

the increasing proliferation of encryption technology that prevents access to critical V 
nart-np 06 obtamed through la wful electronic surveillance. The FBI and our law enforcement 

to ensureTawfuT acSTs'mr^ r T*", 9 With Congress and the telecommunications industrj 
sLrch and s^zure evi dence obtained thr °ugh electronic surveillance and/o7 

through ^ ^et^dat a ar th e n aLd a n* !^ W en [° rcement reMwe the same information 
9 tadata, the Cloud, or through guessing the password on the phone? 

^m^^n^carrieis^^s^rovl^us^^'nfon^uol^to^aw^n^rreme^'Bu^thah^' 11 ^ 

when tima ,s af tha ™ - 

viild F infoTm^nn ab / e ^ acces ! data via the Cloud with a search warrant, but that will not 

people d ' eS t0 aC “ SS the tyPaS ° f inf ° rmation naadad t0 Protect” nd ^rve , he Scan 

a H s S a ? n ZT n r n,c ° a ° n provida ' s 

Yes. A number of the country's largest providers have been openly vocal about their 
concerns regarding surveillance and have published an open letter to the President and 

StS?' n |arS an S ment ?f ,SSUe Wlth ‘^^“0^0, to 

6ac * ° n g ~ nc « 

What is missing is a vigorous commitment to assist law enforcement when electronic 
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f,e!7 e f l | an< fi i . S autl ? orized - 11 is v 'taHy important to distinguish between law enforcement's 
use of lawfully authorized electronic surveillance and "bulk collection." 

What is needed is an open and frank dialogue about the responsibilities of industry to assist 
aw enforcement. Industry and law enforcement need to move forwart and devel a 
framework under which both sides participate in striking an appropriate balance amona the 

ofTaw L P force C men t t ereStS ' ^ lndustry ' s 9 0als ° f competition and innovation, and the needs 


Why does law enforcement believe companies should be forced to build in 
comM ° rS ^ hen des,9n,ng serv *ces? Don't backdoors pose a security risk for 


That's a common misperception of what law enforcement needs and what law enforcement 

La ^ enforcement is not asking for unfettered access into any provider's 
network As part of the ideal CALEA process - the industry develops a technical standard 

resident irf spacif,catl0n Processes; a provider controls the technical solution 

iwf d Kf " etwork ; lt ensures its network is capable of isolating only the target 

When the nrdp 6 C ° Urt 0r ? er; * activates the interception; and it disables the interception 
. fP the order e * p,res - Law enforcement is only the recipient of the information collected 

lawfuf 3 ' fr0nt ‘^eer" approach - where law enforcement first gains the 

to condurt XUtemept" the Pr ° Vldar W ' th tha COUrt order that diracts the P r0 '' ldar 

to f s 5 6SS that an open ' transparent process for identifying technical 

commen S urate n with theT^n RrSt ' f the publ * c can be assured that the capabilities are 
SrnnH fhl H ! h the alread V existing authorities granted to law enforcement by statute 
Second, the md ustry understands its responsibilities and all providers are held to the same 

standard (i.e., a level playing field). Third, law enforcement can be confident that it will 
provider " a " d iS aUth0riZed b V la " * collect, regards of the speclfic serllice 

cninffr?ne r H 6men L bel ieves tbat providers can minimize any risks by developing intercept 
solutions during the service's design phase. Such solutions are likely to be better smarter 

cheaper, and more secure than solutions that are retrofitted to exjlng produS Ihere was 

similar apprehension during the initial stages of discussions about CALEA - that there would 

?h, a , n „l'I C rK Sed u SeCUrl . ty riSk ln havlns technlcal solutl ° ns rodent 'h Carrie " networi<r 
That prediction has not come to pass. K5>- 


t H hey SSSriT d °“ - FBI VOU know 

There are hundreds of communication service providers that offer new services which do nnt 
Snues to rt evoiJe SUrVelllanCe Th ' S " Umber COntlnues t0 9 row as technology 

an'Sfldarwith^vanH a J| 0 n r Pan - V ° r lnd, '' ,du “' *» provide "technical assistance" to 
an official with a valid electronic surveillance order. Does the phrase "technical 

assistance so vague that it leads to differences of interpretation? 

Is e s S ismnr?mrnii?i a u SiS ' anCe " dau , sa ln federal wireta P '» is often insufficient. The 
assistance furnished by some providers simply does not provide law enforcement with the 

information it requested and which it needs to fully understand or acquire the relevant 


Federal Bureau of Investigation 

Office of Public Affairs 
National Press Office 


m 


I^n i£= raCti S! "l atter ' a CALEA compliant provider who has a built an intercept caDabilitv 

a pro vld^r” that” hlT W T? be able to assist law enforcement immediately, whereas 
Tn P m^? e l hat h ° solutlon and attempts to render "technical assistance" likelv will not 

to an t'Za£ eS ' p ™ iders attempting to render assistance mus? divert ZoukZs to react 

of V 0 f a9e ; tak / n9 ° r kidnap p |n s ^nanowhe“timeT 

e. Despite their best efforts, critical Information will be lost due to the delay. 

companX 3 daMy dUmP ° f Sh0ts 

daify re^o^of ^^awfud^autho'i^i^^nfo^/tion^Bu^fn 1 m^V^te^^^^e^nformation is 
incomplete or not provided in a timely manner to support eve% t™ oTfn^S 

There IS also an issue with law enforcement receiving "screen shots" in that thev are 

KeadTu^Tr Sfana^X^^ «*" -formSXXt 

that discussion would result in uniformity in the information law enforcement canexner/' 
from providers and what companies can expect to provide enrorcement can expect 

or°der^°How B m a r n! P « nd W ,? en com P anies outright refuse to comply with a court 
. How many times do you take that company to court? 

Ih^r mary ^ ourt ' based recourse available to law enforcement is to pursue an order to 

rapuirfmaX Xha cXXrder W tXs re ? U '7h a C °T any t0 eXplaln Why i( cannot meet the 

W/a/-* * i- order to assist in the implementation of an interceDtion Th** 

a 0 r ,ssued — ■ «« - - 

fn Tittefs 1 h u a yc e la h ctioV2 0 52 b 2w n h!rh Uad f Under tha CALEA enforcement provisions set forth 

CALEA As written the onfra 2 wh ^ h/ m turn ' ,ncor Porate the provisions of Section 108 of 
L-ALtA. as written, the enforcement provisions are cumbersome and the oursuit nf 
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see a need to 


However it is not correct to imply that the enforcement provision of the law cannot have 

issued to thl l^enbonTfTr m 0ViSi °' n al '° WS ' aW enforcement to raise non-compliance 

att ?^ l0n of a company's senior management and work toward a common 

info f a ° com P an y s obligations. Law enforcement and prosecutors are more 
seized 5 w?thVco^t n o 9 rd C ° m fh anieS haVS th * appro P riate capabilities at their disposal when 

u n d e rl ylng^i ^ u es^ b u t *t his^ o p t i or^ re ma?n s^ a bl e deeded r ° U ^ ^ ^°" 9ed ~ of the 

u pd a te^ex^stf n g 'l a w^su di CAL E A? rVG * * * 3 nCe -I* ^ or 

electronic s^eHlan^nLmr r ' Wideni , ng gap between technology and law enforcement's 
surveillance capabilities is not a new phenomenon. For decades, law enforcement 

has struggled \o keep pace with evolving communications technology periodically reouirina 

rea n |ities S The^ a° ‘ aW enforcement capabilities with new technological 9 
advanHA^P dl . fference toda V ,s the sheer pace at which communications technology is 

the sonhiiira^ PaS H ,n9 ye f brin9S a dramatic increase in the volume of communications 
the sophisticafon and complexity of communications service offerings, and the number of 

mmumcations service providers. The same technology fueling this raDid innovation 

mcSnalv teTs U S| U a S fo n ? akin » lawful Inception of modern communications services 
increasingly ess feasible for law enforcement. Unless corrective action is taken law 

becom| n Jbsofete eCtr ° niC Surveillance ca P ablllties continue to erode and potentially 


Domestic Retention and Investigatory Powers (DRIP) 

!■?' ' ‘ he J Unlted K "'9«0">. which requires companies To rT^ curtomer 

mmumcations data, impact the Going Dark problem in the US? 

^forceZm^Vwii^' TSI °, n h °Z ‘ h ! UK lesislation wi " lmbact United States law 
facing a similarly daunting challenge in conducting elettr^ Glance ' h<i ^ * 


NDCAC 

I^u?the ND?« 7 hed * He NDCAC ' IS “ WOrk,n9 as e *P artad? Can I iearn more 

I 6 ®'. J. he ^. DCA U C was des 'gned as a hub for technical knowledge management that 
c I'tates the sharing of solutions and know-how among law enforcement aaencies and 

feveraaesTsh W en [ orcement s relationships with the communications industry. The NDCAC 
everages 7 shares law enforcement's collective technical knowledge and resources on issues 
involving real-time and stored communications to address challenges Dosed bv advanrad 

$erVlCeS and tecbn0 '°9ies. But, It can't solve ar o f“w P enfomemen?'s 
problems it allows a certain measure of self-help within the community The entira 
community still necessarily relies on industry's assistance Commun,t y- The entire 

It is important to note that the NDCAC does not conduct research and development is not 
respons'ble for the execution of any electronic surveillance court orders, and does not have 

fpr'hn-^u 0136 ?^ 01191 0r investi 9 ative role in investigations. Rather, the" NDCAC provides 
technical knowledge and referrals in response to requests for assistance from an? member 





?Mr7ilf&S?> iXafck :*«3«^T^rfebbbc^^ (>. 
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More information is available on the website: http://www.ndcar.riiF; nm. 

What is the NDCAC? 

The National Domestic Communications Assistance Center (NDCACi •<= Hpcinnori , 

kn « ted9e ™" a 9ement «* facilitates ?he shar ng of“2ions ^ anS knowhow 
a ™ L, 9 J aW en ! orcement agencies. The NDCAC leverages and shares cX^e tecLicaT 
. a 9 e an resources of federal, state, and local law enforcement with respect to 

SS S T" a "“ capabilities, evidence collection on commuXtions devK and 
technical location capabilities, as well as works to strengthen law e^orcemenTs 
relationships with the communications industry. The NDCAC operates a 24/7 hoin Hod- f 

knowledge KSS * aff of 

community. response to requests from any member of the law enforcement 

S^?P=SSSaSESr 

a referrals in response to law enforcement's requests for technical assistance. 

Where is the NDCAC located and how is it staffed? 

i^ DCA ? IS 3 De P artment of Justice organized facility operated by the FBI on behalf of 
* ha ' Zr for “ ment oommunlty. It is located In Fredericksburg Virginfa and^s staffid 
th technical experts dedicated to supporting the entire law enforcement community Its 

Bureif, “,T' S ^ ° T f a9ents from tha four D0J 'ow enforcement componem agenc^s 

CEA) ' F8 i' and United States Marehal = Service (u!ms) Sedition the 

NDCAC has engineers and support personnel on staff. mon ' tne 

tills' now? haS the NDCAC been 0perational a "“ "hy are we only learning about 

InlerneVbas" 0 andmobile clmuni^ o e n n s f “ rCemant h ° W l ° ea ''“< 1 ™<> 

foc e us N ofthe NDMr's W i?ni„ Variety .° f train i nS *° the law enf°Tement community. The primary 

location ca Pabiht,es.The ND^C C |ever^ge^ex < istmg n trai i ning , made <i avai^ble , |^ t ^eFBI and 
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other federal, state, and local law enforcement agencies, 
to fill in any gaps. 


It also develops its own courses 


Tf2? < ? 1 P? rsonne ' from other federal, state, and local law enforcement agencies are able 
to obtain advice and guidance if they have difficulty implementing lawful electronic 

surveillance court orders. 


Does this increase in law enforcement's ability to monitor communications of 
innocent Americans pose a threat to civil liberties? 

First, the NDCAC is not responsible for the actual execution of any electronic surveillance 
court orders and does not have any direct operational role in investigations. 

Second, with respect to law enforcement investigations, it is important to emphasize that 
we are only talking about lawful, court-ordered intercepts in ongoing investigations. When 
investigators cannot collect communications pursuant to court order in near real-time, they 
may be unable to act quickly to disrupt threats or to protect public safety. In order to 
intercept electronic communications, law enforcement must have a court-order authorizing 


' r f/ FBI em P'°y ees carr y out their mission according to an established set of rules 
and with full respect for the constitutional and statutory rights of the people. The FBI's 

Domestic Investigations and Operations Guide (DIOG) establishes the FBI's internal rules 

t0 ,m P |ernent the Attorney General's Guidelines for Domestic FBI Operations 
(AGG-Dom). The DIOG and AGG-Dom were promulgated in late 2008 to ensure that the FBI 
is equipped with all lawful and appropriate tools so that it can transform itself into an 

intelligence-driven organization that assesses and investigates criminal and national security 
threats to our nation and its people. 7 


The NDCAC has been described as a secretive Internet-surveillance unit tasked 
1^ thistr^e?" 9 techn0,0gy to eavesdro P web-based and mobile communications. 


No. There is nothing secret about the NDCAC. It is housed in a publicly identified location 

with a public website (http://www.ndcac.ciis.oovi and a publicly available budget 

Additionally NDCAC received guidance from an executive advisory board whose meetings 
are open to the public. 

The NDCAC does not conduct research and development, is not responsible for the actual 

execution of any electronic surveillance court orders, and does not have any direct 
operational role in investigations. 


Additionally, the FBI does not randomly intercept electronic communications. FBI 
investigative activity follows an established set of rules with full respect for the 
constitutional and statutory rights of the people. In order to intercept electronic 
communications the FBI must have a predicated investigation and a court-order authorizing 


Is it true that the NDCAC is working with specific communications 
develop back-doors" to facilitate law enforcement surveillance of 


providers to 
user accounts? 
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d ,° eS W ? rk With industry in a number of different ways. Specifically, the 
NDCAC identifies law enforcement's electronic surveillance needs, works to understand 

providers capabilities, and validates that those industry solutions work. Neither the NDCAC 
nor law enforcement requests or has the ability to control providers' solutions. Rather each 
provider is responsible for its respective solution and provides to law enforcement any 
intercepted communications only with the appropriate lawful authorization. 


Is the NDCAC charged with creating customized surveillance technologies aimed 
at a specific individual or company? 


No. The NDCAC does not conduct research and development into electronic surveillance 
solutions. Further, the NDCAC is not responsible for the actual execution of any electronic 

o ! a i Ce ° rd e rs ' a n d does not have any direct operational role in investigations, 
at er, the NDCAC provides technical knowledge and referrals in response to law 

en orcement s requests for technical assistance. Those referrals allow law enforcement to 
everage existing solutions, to the extent they exist, that may not be otherwise readily 

dVdll3Dl6. 7 


